Your privacy
This notice explains what personal information I collect when you visit frankiepang.com, email me or commission work, why I need it, who else sees it and how long I keep it. The short version: the site has no tracking or advertising, and I only use what you send me to reply and do the work.
- Tracking
- No analytics or ad cookies
- Selling data
- Never
- Law
- UK GDPR and the Data Protection Act 2018
- Contact
- [email protected]
Who is responsible for your information
Frankie Pang Studios is the trading name of Frankie Pang, a sole trader in England. I decide how your information is used, which makes me the "controller" under UK data protection law.
- Address: [trading address]
- Email: [email protected]
What happens when you browse
Server and security logs
The site is hosted by Cloudflare. Like any web host, Cloudflare's servers record technical details of each visit, such as your IP address, browser type, the page requested and the time, to deliver the site and protect it from attacks. I don't use these logs to identify you.
No tracking cookies
This site doesn't use analytics, advertising or social media tracking cookies, so there is no cookie banner. Cloudflare may set a strictly necessary security cookie if it needs to check that a visitor is not a bot.
Your display settings
If you change the site's appearance (light, dark or glass level), or choose a scene on the Studio page, your browser remembers that choice in its own local storage. It stays on your device, is never sent to me, and you can clear it at any time in your browser settings.
Fonts and videos from other services
- Google Fonts. The site's typefaces load from Google's servers, which means your browser shares your IP address with Google to fetch them. Google says it doesn't use this to build profiles of you.
- YouTube videos. Where a project page shows a YouTube video, it uses YouTube's privacy-enhanced mode. YouTube only receives information about you if you press play.
- Links to other sites, such as LinkedIn, are covered by those sites' own privacy policies.
When you email me or commission work
The site doesn't have forms. If you email me, I receive whatever you choose to send, usually:
- your name, email address and phone number, and the organisation you work for;
- details of your project, and any photos, drawings, CAD files, logos or videos you attach.
If you go on to commission work, I also keep:
- quotes, agreed changes, invoices and payment records;
- delivery or collection addresses;
- the bank details shown on payments you make to me.
I don't need, and don't ask for, any sensitive information such as health details.
Purposes and lawful bases
Data protection law asks me to name a lawful basis for each use of your information:
| What I do | Lawful basis |
|---|---|
| Reply to your enquiry and prepare a quote | Steps you've asked for before a contract, or my legitimate interest in answering messages |
| Design, make and deliver your commission, and invoice for it | Performing our contract |
| Keep business and tax records | Legal obligation (HMRC record-keeping) |
| Keep the site running and secure | Legitimate interests |
| Show your commission in my portfolio | Your consent, which you can withdraw at any time |
| Deal with complaints or legal claims | Legitimate interests |
I don't send marketing emails or newsletters, and I never sell your information.
Who else handles your information
I only share what each one needs:
- Service providers who host the site (Cloudflare), my email and files, and my bank.
- Couriers, if your piece is posted, get your name and delivery address.
- An accountant or HMRC, for my tax records, if needed.
- Others only where the law requires it, or to protect my legal rights.
Outside the UK
Some of these providers, including Cloudflare and Google, may handle information in the United States or elsewhere. When they do, it is protected by safeguards UK law accepts, such as the UK-US data bridge or the UK's standard contract clauses.
Retention
- Enquiries that don't go ahead: up to 2 years, in case you come back to the idea, then deleted.
- Commission records (quotes, invoices, payments, correspondence): 6 years after the end of the tax year the job finished in, for HMRC and in case of a claim.
- Your files and drawings: for as long as the commission and any aftercare need them. Tell me if you would like them deleted sooner.
- Server logs: for the short periods Cloudflare sets.
What you can ask me to do
You have the right to:
- get a copy of the personal information I hold about you;
- have anything inaccurate corrected;
- have your information deleted, where I don't need to keep it;
- ask me to limit how I use it, or object to my using it;
- receive it in a format you can take elsewhere;
- withdraw your consent, where I rely on it.
Email me at [email protected]. It's free, and I will reply within one month.
Complaints
If you are unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Updates to this notice
If I change how I handle information, for example by adding analytics or a contact form, I will update this page and the date at the top first.